Privacy Policy

The data controller is MCCALDEN CONSTRUCTION LTD (“CaldenCraft”, “we”, “us”), registered in Scotland, United Kingdom, at 8 Robin Way, Carmyle, Glasgow, Scotland, G32 8EP, United Kingdom. You can reach us about privacy at support@mccacons.shop or +44 7793925824.

• Order and delivery data: name, email, phone, delivery address, items ordered and order value.
• Account and membership data: login email, membership tier and saved projects or wishlists (if you create an account).
• Support and enquiry data: the contact, trade enquiry and checkout details you submit, and the content of your messages.
• Payment metadata: confirmation of payment, amount and last-four/brand from our payment provider. We never see or store full card numbers.
• Technical and usage data: IP address, device and browser type, and pages viewed, collected through cookies and similar technologies.

Most data comes directly from you when you order, register, subscribe or contact us. Technical data is collected automatically as you use the site. Payment confirmation data comes from our payment processor.

• To fulfil your order and provide the site — performance of a contract.
• To provide support and answer enquiries — performance of a contract and our legitimate interests.
• To manage memberships and process payments — performance of a contract.
• To prevent fraud, secure the service and keep records — legitimate interests and legal obligation.
• To send marketing where permitted — consent, which you can withdraw at any time.

Card payments are processed by Stripe on Stripe-hosted pages. Your full card number, expiry and security code are entered on Stripe's secure environment and are never transmitted to or stored by CaldenCraft. We receive only the payment result and limited metadata needed to manage your order.

We share personal data only with processors that help us run the business, under contract and only as needed:

• Hosting and infrastructure: our website hosting and serverless platform.
• Payments: Stripe (and PayPal where offered) for processing and fraud prevention.
• Email and support: our email and helpdesk provider used to reply to you.
• Delivery: the carriers that ship your kit.
• Database and lead storage: our managed database provider for orders and enquiries.

We do not sell your personal data. We may disclose data where required by law.

Some processors are located outside your country, including outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.

We keep order and accounting records for as long as required by law (generally up to 6 years). Enquiry and marketing-lead data is retained for no more than 24 months from your last interaction unless you ask us to delete it sooner. Account data is kept while your account is active.

Subject to your location and applicable law, you may have the right to:

• Access the personal data we hold about you and request a copy.
• Correct inaccurate data or complete incomplete data.
• Erase data, or restrict or object to certain processing.
• Data portability.
• Withdraw consent at any time, without affecting prior processing.
• For California residents: know, delete, correct and opt out, without discrimination for exercising these rights.

To exercise any right, email support@mccacons.shop. We respond within the timeframe required by law.

We do not sell or share your personal information for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA. If this ever changes, we will provide a clear opt-out.

We use strictly necessary cookies to run the cart and checkout, and limited analytics to understand usage. See our Cookie Policy for detail and choices.

We do not make solely automated decisions that produce legal effects about you. Our products include tools and chemicals; the site is not directed at children. We do not knowingly collect data from anyone under 13, and 13–17 year-olds must have parental or guardian consent and supervision.

We use technical and organisational measures — encryption in transit, access controls and reputable processors — to protect your data. No method of transmission is completely secure, but we work to protect your information and to notify you and regulators of breaches where required.

Contact us first at support@mccacons.shop and we will try to resolve any concern. You also have the right to complain to your data protection authority — in the UK, the Information Commissioner's Office (ICO). This policy is governed by the laws of Scotland, United Kingdom.